Re: Firewall Client
- From: "Scott Force" <list@xxxxxxxxxxxxxxxxxxxxxxxxx>
- To: isalist@xxxxxxxxxxxxx
- Date: Wed, 21 Jan 2004 07:52:02 -0700
Tom,
The printing problem is as follows. I have a remote site with users who
have a public IP address with a printer with a public IP address (TCP/IP
port). They are behind a firewall. The users connect to my main office
through a MS VPN client and get an IP address from my DHCP server
(192.168.1.XXX). When I have the Firewall client installed on their PC's
they can't print to the printer within their makeshift LAN, either
connected or not connected to the VPN. If I remove the Firewall client
they can print connected or not connected to the VPN. This wouldn't be a
problem if I could just configure their browser to get internet access
through my ISA server without the Firewall client which I evidently can't.
> Hi Scott,
>
> What does your Web Proxy log show for these connection attempts? Are you
> sure there are no SSL connection attempts as the users automatically log
> onto those sites in the background?
>
> Not sure why you would have printing problems with the VPN clients. Was
> it a name resolution issue?
>
> Thanks!
> Tom=20
>
> -----Original Message-----
> From: Scott Force [mailto:list@xxxxxxxxxxxxxxxxxxxxxxxxx]=20
> Sent: Tuesday, January 20, 2004 11:31 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: Firewall Client
>
> http://www.ISAserver.org
>
> Q-2 Thanks Jim. I had the Firewall client installed on the VPN clients
> and it was interfering with printing on the LAN.
>
> Q-1 That's the really odd thing, they are not being required by the site
> for SSL connections. These are basic sites like getting to the browser
> home page or any main page. The users deafult web page is msn.com When
> they open their browser they get the HTTP 403.4 error message. If I
> type in from their browser http://www.yahoo.com I get the same error.
> This was working for them just fine Friday then Monday they began
> getting this error. Very odd and it's only happening to a select few.
> Any other thoughts? Like I mentioned, if I just add the ISA server as
> the default gateway on their pc, no problems.
>
> =20
>
> > Q1 - The web site, not the client is the one requiring SSL.
> > Take a look in the web proxy logs; if the web site refused the
> connection for non-SSL, it'll be there.
> > My bet is that they're using a link that requires SSL.
> >=20
> > Q2 - no; they must be either Web Proxy or Firewall clients.
> >=20
> > Jim Harrison
> > MCP(NT4, W2K), A+, Network+, PCG
> > http://www.microsoft.com/isaserver
> > http://isaserver.org/Jim_Harrison
> > http://isatools.org
> >=20
> > Read the help, books and articles!
> > ----- Original Message -----
> > From: "Scott Force" <list@xxxxxxxxxxxxxxxxxxxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Tuesday, January 20, 2004 06:53
> > Subject: [isalist] Firewall Client
> >=20
> >=20
> > http://www.ISAserver.org
> >=20
> > What would cause a firewall client to start requiring a SSL connection
>
> > for no reason? I have about 3 Firewall Client users (out of 125=20
> > users) who get an error message in their browser that they must=20
> > connect to regular (yahoo, msn) webpages with an https connection. =20
> > They run 3rd party apps that need the Firewall client installed so my=20
> > SecureNat temp work around can't stay configured.
> >=20
> > Also, is there a way to configure remote VPN users to access my ISA=20
> > server for Internet without installing the Firewall Client? Thanks,
> Scott.
> >=20
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org Windows=20
> > Security Resource Site: http://www.windowsecurity.com/ Network=20
> > Security Library: http://www.secinf.net/ Windows 2000/NT Fax=20
> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
>
> > jim@xxxxxxxxxxxx To unsubscribe send a blank email to=20
> > $subst('Email.Unsub')
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')
Other related posts:
